Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier: t4phHSp+VB8TzWbY86Cumv7aW2skHO8BQ2RcKChMbiE=
Subject key identifier: 7E:C8:81:E4:31:C9:39:B7:21:73:CA:C9:D1:7F:E1:EA:53:52:AB:84
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 0355
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number: 034A
Signing time: Fri 31 Jan 2025 01:07:23 +0000
Manifest this update: Fri 31 Jan 2025 01:07:22 +0000
Manifest next update: Fri 07 Feb 2025 01:07:22 +0000
Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: CzXQsf+1rHg6jbuFmeTULE5rk3rVrt8D2avZtfeeXTo=)
2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: 5GXMULODPH55klADGmbXCGRoSkzNyH5a8JpZ/WW8nU4=)
3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: B9akMsoRDWVX9pojvTb/hR3plmtBWRHwS0hIvuBtoYg=)
4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: 0iilf+ewcCHfBiolJYNIAXD//CPGH9dwNN6NaTR2wTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Jan 31 01:07:22 2025 GMT
Not After : Feb 7 01:07:22 2025 GMT
Subject: CN=679c224b-edad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:d6:dd:93:f3:f8:7c:1f:f6:3c:2e:db:a6:
89:0e:fe:0c:cd:46:4a:21:a0:d5:2f:22:f9:c8:63:
d9:4a:75:c2:6c:f8:b9:4a:15:e1:76:e1:6e:a9:0b:
67:44:1a:ce:02:ca:73:73:f3:16:cb:70:01:50:40:
92:25:0e:ca:3c:42:24:69:ff:19:f1:e1:d6:a3:9a:
07:25:9c:21:90:af:81:09:fe:01:06:33:37:8a:58:
22:52:f0:df:34:6c:06:d4:65:c5:d4:62:74:54:3b:
92:f4:3f:3f:68:c5:11:bb:28:37:ea:0a:fc:8c:4a:
61:a4:49:13:f7:a4:30:fa:76:f1:cb:f8:b5:5f:86:
92:32:43:ea:42:19:f0:71:b2:2d:9f:df:71:c3:d8:
3c:f8:ff:77:64:b7:aa:92:22:0c:30:b9:29:9f:f7:
b1:6f:59:97:0a:e6:c5:de:14:01:e3:72:1c:55:b6:
79:8e:4e:63:76:35:68:55:37:8f:1e:d6:f9:2b:28:
b7:52:d2:4c:d3:d9:e3:6d:fd:94:7c:e7:e7:76:9b:
13:72:e7:fc:1a:d2:3e:40:13:34:8b:84:7c:37:2f:
2b:8d:43:e8:64:ce:59:97:52:c2:e5:52:1c:22:ea:
39:9c:5b:eb:64:fd:9a:1b:ab:be:fc:5e:a7:b6:b6:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:81:E4:31:C9:39:B7:21:73:CA:C9:D1:7F:E1:EA:53:52:AB:84
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:e4:a3:82:d2:ab:dc:6b:7f:bb:ed:86:76:e4:bd:5e:28:46:
86:35:5b:0b:91:02:bf:8c:da:ab:a8:fa:a4:00:39:0e:5f:3b:
7f:b6:e9:05:d4:e2:8e:96:22:39:94:14:b0:54:21:97:73:a6:
11:fa:73:f3:9d:cf:65:ab:a9:3a:c4:55:4f:ec:d7:e9:33:10:
54:91:38:bc:59:3d:88:3d:a8:1a:d6:38:b0:0d:58:57:56:17:
56:3c:9e:20:34:ee:e4:bb:04:ce:bd:d6:4a:bd:66:7a:7d:78:
e2:9f:3d:a9:2f:5d:4c:4d:51:09:cf:f7:47:7d:5f:e6:e8:34:
02:07:be:17:ef:9e:d7:1d:34:f7:b7:f0:ff:c9:3a:da:ea:7d:
e3:6e:2d:79:c5:12:87:32:de:8c:fc:fc:17:f5:a5:1d:7e:6d:
b4:ef:8a:31:91:c6:4d:d2:b0:d7:de:37:c0:15:15:a3:00:88:
4b:de:8f:32:8d:2b:ed:7a:51:cb:97:7d:fd:c7:38:ce:19:66:
cd:a5:5d:b7:bf:7c:a0:94:8d:49:68:bc:d3:3f:7d:4a:96:96:
db:db:e2:61:74:ef:53:27:ca:37:a7:ee:ea:da:00:69:3b:9a:
db:15:17:53:30:b1:0a:0d:97:d6:91:20:cc:a9:06:1a:7e:c7:
c9:53:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:52 2025 by rpki-client